Microsoft cries 'foul' on OS vulnerability data - Network World

Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Security

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

BitTorrent blocking; SQL injection attack. Listen now!

Network World 360

Hacker writes Cisco rootkit; Microsoft launches online telescope. Listen now!

Network World 360

Additional Resources

RSS

FEATURED WHITEPAPERS

Fill the Gaps in Your Disaster Recovery Plan with Single Object Recovery for Active Directory NetPro

Most companies have a solid disaster recovery plan in place to handle a "complete failure" of its Active Directory, which is really quite rare. What most recovery plans are missing, and the most common scenario, is a means to efficiently restore single directory objects. In this paper, we'll explore what most disaster recovery plans already address, highlight potential weak points, and suggest solutions that help fill those gaps-without requiring you to completely re-do your existing plan.

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

RSS

FEATURED WEBCASTS

Learn how to Create a More Efficient Virtualized Data Center Novell

Find out how you can consolidate Windows workloads and create a more efficient virtualized data center in this informative webcast, "Reduce Complexity and Cost - Windows Server Consolidation with Virtualization." Six concise webcast modules are available for your viewing. Watch them all consecutively or only the topics that interest you. The modules cover performance, user case studies, enterprise-level support, managing windows workloads, setup and configuration and the future of virtualization. Learn more today. Register below to learn more and be entered to win an Archos 605 Portable Media Player.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

For implementing GTD you might try out this web-based application: Gtdagenda You can use it to...- Dan

Join the Discussion

Microsoft cries 'foul' on OS vulnerability data

By Paul Roberts , IDG News Service , 11/07/2002
  • Social Web 
  • Email 
  • Feedback 
  • Close

Microsoft responded to a report published last week by London-based security intelligence firm Mi2g Ltd. that claimed the Apple Macintosh operating system (OS) and certain varieties of Unix are less vulnerable to attack than the popular Windows and Linux operating systems.

The report, a summary of which was released to the public by Mi2g, attributed 44% of the software vulnerabilities announced in the first 10 months of 2002 to Microsoft's Windows operating system and 19% to the open-source Linux operating system. By comparison, the company attributed only 1.9% to Apple Computer's Macintosh OS.

In an interview, Mike Nash, vice president of the security business unit at Microsoft, said that he feels those numbers are misleading.

"Essentially what (Mi2g) has done is look at a combination of vulnerabilities announced by vendors and new vulnerabilities reported by users," Nash said. "There's no way to determine if the same issue is counted multiple times, or if erroneous vulnerabilities are being reported."

Products with more customers, like Microsoft Windows, are bound to have more vulnerabilities reported under such a system, regardless of whether those products are less or more secure than the competition, according to Nash.

Jan Anderson, a member of Mi2g's Intelligence Unit, says that the small size of the Macintosh operating system's user base -- what Mi2g refers to as "security through obscurity" -- does not entirely account for Mi2g's results, however.

"Our main point here is that although only about 3% of systems are running Mac OS, the proportion of attacks suffered by these systems is 60 times less than this, i.e., 0.05%. There are also relatively few known vulnerabilities of Mac OS as stated in the news release," Anderson said.

The issue may come down to which vulnerabilities get counted and which don't.

In a statement, Mi2g said that the company is in touch with Microsoft at a senior level and that the two companies are working together to deal with the issue of vulnerability counting.

1 | 2 | 3 |  Next >
Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code